Ant International, Mastercard, and Visa have started coordinating Know Your Agent trust signals across card and wallet ecosystems. The important word is “started”: the release defines a direction and control categories, not a finished interoperability standard.
What The Collaboration Covers
In a September 10, 2026 joint release, Ant International, Mastercard, and Visa said they would explore common principles for recognizing agent identity and trust across payment networks and digital wallets.
The approach is meant to reduce repeated onboarding while preserving each network's own verification and transaction decisions. The release centers the work on three control areas:
- trace an agent to a validated operator, cardholder, business, or organization;
- assess agents against shared security and behavioral certification requirements; and
- continuously evaluate identity and transaction signals after onboarding.
Identity Is Not Transaction Authority
Recognizing an agent can answer who operates it and which requirements it previously met. It does not establish that this buyer authorized this transaction, that a budget remains, or that a merchant should accept the risk. Preserving network-specific decisioning is therefore a feature, not an inconsistency.
Builders should keep operator identity, agent certification, delegated intent, payment instrument, and transaction decision as linked but separate records. A revoked certification or changed operator relationship should invalidate future trust without rewriting the historical audit trail.
Questions A Real Standard Must Answer
- Which identifiers and proofs move between networks?
- Who can issue, suspend, revoke, and renew an agent certification?
- How are model, tool, operator, and ownership changes represented?
- Which monitoring signals can be shared across jurisdictions and under what consent?
- How do participants contest a decision or allocate liability after a bad transaction?
- What conformance tests show that two implementations interpret a signal the same way?
Scope And Limits
The participants say they will explore common principles and collaborate through BuildFin.ai in Singapore. The announcement does not include a public data model, protocol, certification body, conformance suite, delivery date, or live cross-network transaction.
It is still a useful governance signal. Agent identity is moving from isolated provider registration toward portable trust, while transaction authorization remains local. Until the missing artifacts arrive, operators should describe this as coordination work rather than interoperability already achieved.